Log File Agent does not send the event to EIF probe.

Technote (troubleshooting)


Problem(Abstract)

Only when PingTimeout parameter is set in conf file of Log File Agent, the event cannot be sent to EIF probe.

Symptom

The event is written to cache file of Log File Agent, but the event is not sent to EIF probe though ping command is successful from the system of Log File Agent to the system of EIF probe in command line.


Cause

When PingTimeout parameter is set for Log File Agent, the agent tries to get ICMP protocol information with getprotobyname function.
If ICMP entry is not in \windows\system32\drivers\etc\protocol (in case of Unix, /etc/protocol), Log File Agent fails to get ICMP information and does not try to connect to EIF probe.

Diagnosing the problem

Set the following trace in Log File Agent.

KEF_DEBUG=M

When the issue occurs, the following message is logged.

(5110B534.00AF-1C7C:eipc.c,1726,"ed_ping") Error - icmp unknown protocol

Resolving the problem

Please add ICMP entry in \windows\system32\drivers\etc\protocol.

Rate this page:

(0 users)Average rating

Document information


More support for:

Tivoli Monitoring Version 6
Tivoli Log File Agent

Software version:

6.2.2, 6.2.3

Operating system(s):

AIX, HP-UX, Linux, Solaris, Windows

Reference #:

1624835

Modified date:

2014-01-06

Translate my page

Machine Translation

Content navigation